Privacy policy
Last updated 2026.
Juniper Resilience LLC ("Juniper Resilience," "the Firm," "we," "us," or "our") is a professional services firm specializing in organizational resilience, risk management, and governance advisory services, headquartered in San Diego, California. We are committed to protecting the privacy and personal information of the individuals and organizations with whom we interact, and to handling personal information in a lawful, transparent, and responsible manner consistent with applicable privacy law and the professional standards expected of a firm operating in the risk and resilience advisory space.
This Privacy Policy ("Policy") describes how Juniper Resilience collects, uses, discloses, retains, and protects personal information in connection with this website. Questions about this Policy or requests to exercise your privacy rights should be directed to privacy@juniperresilience.com.
This Policy addresses the requirements of the General Data Protection Regulation (EU) 2016/679 ("GDPR") for individuals located in the European Economic Area or the United Kingdom, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA") for California residents, and other applicable US state privacy laws. Where specific rights or disclosures apply to residents of a particular jurisdiction, they are identified in the relevant sections below.
Who this policy applies to
This Policy applies to personal information we collect from visitors to this website, including individuals who browse the site or contact us through it.
This Policy applies whether information is collected through digital systems or other means. It does not apply to personal information that has been anonymized in a manner that renders re-identification impossible.
Information We Collect
Website and digital interaction data
When you visit our website, we may collect certain information automatically through standard web technologies, including your IP address, browser type and version, operating system, referring URLs, pages visited, and the date and time of your visit. We may use this information to understand how our website is used, to maintain and improve the site, and to protect the security of our systems. Where we use analytics tools or cookies that involve the processing of personal information, we will provide appropriate notice and, where required by law, obtain your consent.
We also collect the information you provide directly when you interact with the site, including when you:
- Submit a question or contact form — we collect what you enter, such as your name, email address, organization, and message, and use it to respond to your inquiry
- Book or schedule a call — we collect the information needed to arrange it, such as your name, email address, and preferred time, which may be processed through a third-party scheduling tool acting on our behalf
- Download a resource or file (such as a guide or document) — we collect what's needed to provide access, typically your name and email address, and may follow up related to your interest in that resource
In each case, we use the information only to respond to your request, provide what you asked for, and, where you've indicated interest, follow up about our services. You may opt out of any follow-up communications at any time by using the unsubscribe instructions included in the message or by contacting us directly.
Lawful Basis for Processing (GDPR)
For individuals located in the EEA or the United Kingdom, the GDPR requires that we identify a lawful basis for each category of personal data we process. The lawful bases we rely upon are as follows.
Contract performance: We process personal data where necessary to take steps you request before or in connection with engaging our services, such as responding to an inquiry you submit.
Legitimate interests: We process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include understanding how our website is used, improving our services, ensuring the security of our systems, and communicating with people who have contacted us.
Legal obligation: We process personal data where necessary to comply with a legal obligation to which we are subject, including regulatory requirements, anti-money laundering obligations, and requirements imposed by professional standards bodies.
Consent: Where we rely on your consent as a lawful basis, for example in connection with certain marketing communications or non-essential website cookies, you have the right to withdraw your consent at any time without detriment.
How We Share Your Information
Juniper Resilience does not sell or share personal information for the purposes of cross-context behavioral advertising. We do not disclose personal information to third parties for their own independent marketing or commercial purposes.
We may disclose personal information to the following categories of recipients in the ordinary course of our business operations:
- Service providers and subprocessors — third-party technology and service providers who process personal information on our behalf in connection with operating this website, engaged under contractual terms that restrict their use of personal information and require appropriate security safeguards
- Professional and regulatory bodies — where required to comply with applicable law, regulatory requirements, court orders, or professional standards
- Successors — in the event of a merger, acquisition, or sale of all or substantially all of Juniper Resilience's assets, personal information may be transferred to the acquiring entity, subject to equivalent privacy protections
International Data Transfers
Juniper Resilience is headquartered in the United States. If you are located in the EEA, the United Kingdom, or another jurisdiction with restrictions on cross-border transfers of personal data, your personal information will be transferred to and processed in the United States. Transfers from the EEA to our US operations are conducted under appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, where required.
If you would like further information about the specific safeguards applicable to the transfer of your personal information, contact us at privacy@juniperresilience.com.
Data Retention
We retain the information described in this Policy for as long as necessary to respond to your inquiry, operate this website, and meet our legal and regulatory obligations. When information is no longer needed for these purposes, it is securely deleted or anonymized.
Security
We take appropriate technical and organizational measures to protect the information described in this Policy against unauthorized access, use, disclosure, or loss.
No method of transmission over the internet or electronic storage is completely secure. If you have reason to believe your interaction with us has been compromised, contact us immediately at privacy@juniperresilience.com.
Your Privacy Rights
EEA and UK data subjects (GDPR)
If you are located in the EEA or the United Kingdom, you have the following rights, subject to applicable exemptions and limitations:
- Right of access — confirmation as to whether we process personal data about you, and a copy of that data
- Right to rectification — correction of inaccurate personal data
- Right to erasure — deletion of your personal data in defined circumstances
- Right to restriction — restriction of processing in defined circumstances
- Right to data portability — receipt of your data in a structured, machine-readable format, where processing is based on consent or contract
- Right to object — objection to processing based on legitimate interests
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
- Right to lodge a complaint — with the supervisory authority in your country of residence. In the UK, this is the Information Commissioner's Office (ico.org.uk)
California residents (CCPA/CPRA)
If you are a California resident, you have the following rights, subject to applicable exemptions:
- Right to know — the categories and specific pieces of personal information we've collected, its sources, purposes, and any third parties it was disclosed to
- Right to delete — deletion of personal information, subject to certain exceptions
- Right to correct — correction of inaccurate personal information
- Right to opt out of sale or sharing — Juniper Resilience does not sell or share personal information, so this does not apply to our processing activities
- Right to limit use of sensitive personal information — we do not use sensitive personal information beyond purposes permitted by law
- Right to non-discrimination — you will not receive different treatment or pricing for exercising a privacy right
Other US state privacy rights
Residents of Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy legislation may have similar rights, including access, correction, deletion, portability, and opt-out rights. We extend these rights where required by applicable state law.
How to exercise your rights
Contact us at privacy@juniperresilience.com or in writing to Juniper Resilience LLC, San Diego, California. We will respond to verified requests within the timeframe required by applicable law, generally within one calendar month for GDPR requests and within forty-five days for CCPA/CPRA requests, with the possibility of an extension where permitted. We may request reasonable information to verify your identity before processing your request.
Our Use of AI
Juniper Resilience may use artificial intelligence tools to support internal operations, such as drafting assistance or data analysis. Any use of AI within our operations is governed by internal policy and subject to human review.
Information you submit to us directly, through a form, inquiry, download, or as part of a client engagement, is not used by Juniper Resilience to train any AI model.
Please note that content published publicly on this website, like any public website, may be accessed by third-party AI systems (for example, general web crawling) that operate independently of Juniper Resilience and are outside our control. This Policy governs how we handle information you provide to us; it does not govern how outside parties may access publicly available web content.
Children's Privacy
Our services are directed to business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we may have collected personal information from a child under 16, contact us at privacy@juniperresilience.com.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities, applicable law, or regulatory guidance. When we make material changes, we will update the effective date at the top of this Policy and, where appropriate, notify affected individuals directly. Continued engagement with Juniper Resilience following the posting of an updated Policy constitutes your acknowledgment of the revised terms.
Contact Us
For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information:
Email: privacy@juniperresilience.comMail: Juniper Resilience LLC, San Diego, California
EEA and UK data subjects who wish to escalate a privacy concern to a supervisory authority may do so based on their country of residence. In the UK, complaints may be submitted to the Information Commissioner's Office at ico.org.uk.
he rich text element allows you to create and format headings, paragraphs, blockquotes, images, and video all in one place instead of having to add and format them individually. Just double-click and easily create content.

